$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: oevHkoC5DwK6P/cwWKH2dkhgGfEQaW7dfKL8w4fDLr8= Subject key identifier: 85:99:7C:E8:D5:D8:4E:F3:E1:B8:F3:E3:B6:31:C8:D9:88:C8:2F:C3 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 4472FB900711E0FDCB7D0A2EB69B26B426C49D9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01A6 Signing time: Sun 15 Jun 2025 09:32:00 +0000 Manifest this update: Sun 15 Jun 2025 09:27:00 +0000 Manifest next update: Wed 18 Jun 2025 17:33:00 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: uNCqrzuHOAU07jzFGZS0kb1qF1OwN1rZFFeKJc5USqw=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: jCIi6xnL0X9x7d8IEkHfah2DqG8/oNDacSJSk7YacN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:72:fb:90:07:11:e0:fd:cb:7d:0a:2e:b6:9b:26:b4:26:c4:9d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Jun 15 09:27:00 2025 GMT Not After : Jun 18 17:33:00 2025 GMT Subject: CN=85997CE8D5D84EF3E1B8F3E3B631C8D988C82FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:8b:2d:8d:5b:10:1a:17:98:76:ca:58:52: 94:8d:ab:56:dd:da:3f:cf:14:26:90:44:8a:60:5a: 94:6c:57:88:cf:f6:94:1e:a7:2d:e7:8c:95:96:2e: 99:69:d2:56:ee:de:03:92:27:c5:45:56:65:8c:c6: 99:ad:75:7e:8b:f6:fb:56:09:35:1c:50:46:3c:dd: d0:d1:d4:25:e4:8e:f9:11:21:c8:21:09:13:75:08: 48:b6:90:aa:0b:44:ab:d6:71:7c:1c:a5:4e:4e:63: 22:bc:55:21:68:24:70:28:c3:92:4e:8b:93:80:6e: c7:8c:bd:97:3c:d1:1b:55:79:12:30:c9:df:5a:8a: e5:96:62:81:fd:2e:af:1b:06:be:69:1c:cf:7e:f2: 59:5e:68:e6:e9:91:3d:a7:e1:e4:25:67:b8:98:74: 3d:8b:a1:57:3b:6c:ff:b9:1c:ba:cd:8c:a9:0c:e4: c4:3d:c9:25:cf:e3:e0:77:ce:6e:a6:bf:b2:fc:41: 95:75:71:5c:1e:a3:37:e1:3a:a9:be:3d:57:76:be: 4e:ff:86:ce:26:f8:07:13:9d:9a:42:6d:e4:37:29: 07:4e:3f:52:61:a4:1f:c8:72:d3:ec:12:16:b5:7f: a3:74:e5:9e:4a:8a:2d:2f:ab:96:d2:a4:fa:59:66: 1e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:99:7C:E8:D5:D8:4E:F3:E1:B8:F3:E3:B6:31:C8:D9:88:C8:2F:C3 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:30:cc:af:24:92:38:97:e9:80:d1:33:8f:df:f0:9a:52:39: 60:95:fe:f7:8c:2d:a5:30:36:c4:32:c0:f5:02:a3:33:b2:d5: cf:f3:ad:73:0b:b1:33:47:34:84:73:db:db:2b:fa:23:b5:4d: 43:c3:90:56:5d:e9:a1:2d:2f:2b:5e:68:64:37:3c:db:3b:1d: a6:c8:33:cd:a1:a7:b3:32:51:68:3b:de:1e:bd:d9:c5:a8:bb: 79:41:99:cd:81:03:96:64:15:51:84:3f:64:d6:03:fd:d4:ce: 16:7a:63:fd:1b:b3:2d:a1:4d:6f:08:43:52:09:43:ba:f1:0c: 66:e2:c4:5f:71:c1:51:df:ed:b5:94:9b:00:28:85:be:7f:b8: ed:a7:a4:7a:dd:55:2d:eb:e2:77:b3:97:95:95:91:08:da:ff: ed:b7:32:8d:f5:cd:c5:3b:29:04:23:de:94:d6:04:20:76:4f: 04:fd:0b:a8:25:05:16:7f:bd:7f:67:9d:b5:e2:21:db:cf:f5: 5c:7c:ad:17:f9:88:1f:ce:fc:bb:98:06:e0:69:79:15:84:b1: f2:59:ee:81:20:b4:10:01:4a:f2:cb:76:c4:c4:28:c7:76:dc: 2f:ee:b0:1f:b3:b4:e6:50:e6:52:02:15:91:c5:4d:00:00:39: e5:88:bb:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHL7kAcR4P3LfQoutpsmtCbEnZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTA2MTUwOTI3MDBaFw0yNTA2MTgxNzMzMDBaMDMxMTAvBgNV BAMTKDg1OTk3Q0U4RDVEODRFRjNFMUI4RjNFM0I2MzFDOEQ5ODhDODJGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYYYstjVsQGheYdspYUpSNq1bd 2j/PFCaQRIpgWpRsV4jP9pQepy3njJWWLplp0lbu3gOSJ8VFVmWMxpmtdX6L9vtW CTUcUEY83dDR1CXkjvkRIcghCRN1CEi2kKoLRKvWcXwcpU5OYyK8VSFoJHAow5JO i5OAbseMvZc80RtVeRIwyd9aiuWWYoH9Lq8bBr5pHM9+8lleaObpkT2n4eQlZ7iY dD2LoVc7bP+5HLrNjKkM5MQ9ySXP4+B3zm6mv7L8QZV1cVweozfhOqm+PVd2vk7/ hs4m+AcTnZpCbeQ3KQdOP1JhpB/IctPsEha1f6N05Z5Kii0vq5bSpPpZZh6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZl86NXYTvPhuPPjtjHI2YjIL8MwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkwzK8kkjiX6YDRM4/f8JpSOWCV/veMLaUw NsQywPUCozOy1c/zrXMLsTNHNIRz29sr+iO1TUPDkFZd6aEtLyteaGQ3PNs7HabI M82hp7MyUWg73h692cWou3lBmc2BA5ZkFVGEP2TWA/3UzhZ6Y/0bsy2hTW8IQ1IJ Q7rxDGbixF9xwVHf7bWUmwAohb5/uO2npHrdVS3r4nezl5WVkQja/+23Mo31zcU7 KQQj3pTWBCB2TwT9C6glBRZ/vX9nnbXiIdvP9Vx8rRf5iB/O/LuYBuBpeRWEsfJZ 7oEgtBABSvLLdsTEKMd23C/usB+ztOZQ5lICFZHFTQAAOeWIu60= -----END CERTIFICATE-----Generated at Tue Jun 17 18:03:04 2025 by rpki-client